220-1102 Question 481
Single answerUse screensaver locksA medical office uses Windows 10 workstations at the front desk. Staff members often step away briefly, and management wants each PC to automatically require a password after a short period of inactivity without forcing the user to sign out. A technician needs to configure the most appropriate setting on each workstation. Which action should the technician take?
- A
Enable a screen saver, set a wait time, and select the option to display the logon screen on resume
- B
Configure User Account Control (UAC) to its highest level so the desktop locks when the user is inactive
- C
Set the monitor to turn off after 5 minutes in Power Options
- D
Require Ctrl+Alt+Del at sign-in so the workstation locks automatically when left idle
Show answer and explanation
Correct answer: A
Explanation
The best solution is to use a screen saver lock: enable a screen saver, set the inactivity timer, and require the logon screen when the screen saver is dismissed. This is a practical security control for shared or publicly accessible environments such as medical offices, reception areas, and front desks. It protects sensitive information when users step away briefly while preserving open applications and documents. In Windows, this behavior is commonly configured through Personalization/Lock Screen-related settings or enforced centrally through Group Policy in managed environments. Best practice is to use a short but reasonable idle timeout based on organizational policy, especially in environments handling regulated or sensitive data. Monitor power settings and sign-in options can complement security, but they do not replace an actual session lock requirement.
- A. Correct.
Correct. In Windows, configuring a screen saver with a timeout and requiring the logon screen on resume causes the workstation to lock after inactivity while keeping the user session active. This meets the requirement to protect access without signing the user out.
- B. Incorrect.
Incorrect. User Account Control helps protect against unauthorized system changes by prompting for elevation, but it does not lock the desktop because of inactivity. Someone might choose this because UAC is a security feature, but it is unrelated to idle-session locking.
- C. Incorrect.
Incorrect. Turning off the monitor saves power and may make the screen appear blank, but it does not secure the session by itself. A user could move the mouse or press a key and return directly to the desktop if no lock requirement is configured.
- D. Incorrect.
Incorrect. Requiring Ctrl+Alt+Del adds a secure attention sequence at sign-in, which can improve sign-in security, but it does not automatically lock an active session after the user becomes idle. This is a different security control.